summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2022-05-02fix typo in most recent tag listDaniel Micay
2022-05-02make recent tag lists consistentDaniel Micay
2022-05-02publish new release notesDaniel Micay
2022-05-02add last release to table of contentsDaniel Micay
2022-05-02new build numberDaniel Micay
2022-05-02compatibility fix for adevtoolDaniel Micay
2022-05-02split up dependencies againDaniel Micay
2022-05-02Update adevtool docsflawedworld
2022-05-02Note that the GrapheneOS app repo is implementedlberrymage
2022-05-02prepare release notes for monthly updateDaniel Micay
2022-05-02add resolver setup to baseline configurationDaniel Micay
2022-05-01Camera version 30Daniel Micay
2022-05-01screenshot EXIF metadata reduction featureDaniel Micay
2022-05-01clarify alpha channelDaniel Micay
2022-05-01publish new release notesDaniel Micay
2022-04-30disable traditional stateful TLS session cacheDaniel Micay
This is useless for TLSv1.3 since there's no longer any distinction in the protocol based on whether the server is using stateless or stateful session resumption. OpenSSL has a non-standard anti-replay mechanism for 0-RTT based on stateful session resumption but 0-RTT still ends up being a downgrade for the TLS security properties. nginx disables that feature since otherwise 0-RTT wouldn't work with the default stateless approach. Since this cache is only used for TLSv1.2 when stateless resumption isn't disabled and nearly all TLSv1.2 clients support tickets, it isn't getting any significant use. It provides worse forward secrecy than tickets because we implement ticket key rotation based on the expiry time and sessions aren't actively purged from the stateful cache when they expire. Cached session state varies in size and nginx ends up writing errors to the log when clearing out a session fails to make room for a new one due to it being larger. It's best to finally get rid of this flawed approach to session resumption. TLSv1.3 provides the option of forward secrecy for resumed sessions and it's the only approach that's normally enabled so we don't need to worry about this anymore once TLSv1.2 is disabled as long as we never enable 0-RTT which weakens forward secrecy and other security properties.
2022-04-30reorder release notesDaniel Micay
2022-04-30new build number 2022043000Daniel Micay
2022-04-30consistently refer to Updater as System UpdaterDaniel Micay
2022-04-30add Alpha channelDaniel Micay
2022-04-30carriersettings-extractor cleanupDaniel Micay
2022-04-29add missing contextDaniel Micay
2022-04-29update Chromium to 101.0.4951.41Daniel Micay
2022-04-29nearby devices gmscompat improvementsDaniel Micay
2022-04-29improve gmscompat UIDaniel Micay
2022-04-29remove NGA feature declarationDaniel Micay
2022-04-29Bump stylelint from 14.8.0 to 14.8.1dependabot[bot]
Bumps [stylelint](https://github.com/stylelint/stylelint) from 14.8.0 to 14.8.1. - [Release notes](https://github.com/stylelint/stylelint/releases) - [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md) - [Commits](https://github.com/stylelint/stylelint/compare/14.8.0...14.8.1) --- updated-dependencies: - dependency-name: stylelint dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2022-04-29Bump terser from 5.13.0 to 5.13.1dependabot[bot]
Bumps [terser](https://github.com/terser/terser) from 5.13.0 to 5.13.1. - [Release notes](https://github.com/terser/terser/releases) - [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md) - [Commits](https://github.com/terser/terser/compare/v5.13.0...v5.13.1) --- updated-dependencies: - dependency-name: terser dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2022-04-28Camera version 29Daniel Micay
2022-04-27Camera version 28Daniel Micay
2022-04-27GrapheneOS Camera Night mode was renamedDaniel Micay
2022-04-26Camera version 26Daniel Micay
2022-04-26Camera version 25Daniel Micay
2022-04-26document carrier configuration improvementsDaniel Micay
2022-04-26document support for disabling user installed appsDaniel Micay
2022-04-26document additional service changes/togglesDaniel Micay
2022-04-26clarify device model checkDaniel Micay
2022-04-26Bump terser from 5.12.1 to 5.13.0dependabot[bot]
Bumps [terser](https://github.com/terser/terser) from 5.12.1 to 5.13.0. - [Release notes](https://github.com/terser/terser/releases) - [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md) - [Commits](https://github.com/terser/terser/compare/v5.12.1...v5.13.0) --- updated-dependencies: - dependency-name: terser dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-04-26Bump stylelint from 14.7.1 to 14.8.0dependabot[bot]
Bumps [stylelint](https://github.com/stylelint/stylelint) from 14.7.1 to 14.8.0. - [Release notes](https://github.com/stylelint/stylelint/releases) - [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md) - [Commits](https://github.com/stylelint/stylelint/compare/14.7.1...14.8.0) --- updated-dependencies: - dependency-name: stylelint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-04-26rewordDaniel Micay
2022-04-26reorder release notesDaniel Micay
2022-04-26publish new release notesDaniel Micay
2022-04-26new build numberDaniel Micay
2022-04-25Remove note about Play Store uninstallation stallinglberrymage
The Play Store no longer stalls when uninstalling an app if the user rejects the request as of 2022041900, so we can remove this section.
2022-04-25Add missing hyperlink to 2022042000 release noteslberrymage
2022-04-25minor Vanadium tweakDaniel Micay
2022-04-25sandboxed Google Play location compat improvementDaniel Micay
2022-04-25Bump eslint from 8.13.0 to 8.14.0dependabot[bot]
Bumps [eslint](https://github.com/eslint/eslint) from 8.13.0 to 8.14.0. - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md) - [Commits](https://github.com/eslint/eslint/compare/v8.13.0...v8.14.0) --- updated-dependencies: - dependency-name: eslint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-04-24factory images flashing script improvementsDaniel Micay
2022-04-24adevtool updateDaniel Micay